767 matches found
MAL-2025-146829 Malicious code in pulsar-envconfig-nuxtjs-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5761e39a013fd801c9b8b331b1236d5d62883889f8f9ea1c653bea70859836e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pulsar-jwt-warp-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00432a3cb61697434444346db1e5751897caf37a0cf6a2424a28362411bc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141551 Malicious code in deneb-neptune-pulsar-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pulsar-radiant-cypress-dione (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121312
Malicious code in tethys-dependencies-janus-pulsar npm...
MAL-2025-146848 Malicious code in pulsar-zenith-triton-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2308c0086857e94cb94b05a3c706f8f73f30ad6f37c3b5774f0cf69efe612da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140017 Malicious code in blaze-antd-halley-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ada04165f0bab6357a0605b4d95fc185956c1bc0b8618cb7d3f6aa78bd3f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146831 Malicious code in pulsar-farout-pegasus-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936458586d508d170d49bbd490dbb216acb183554cece11d629cd5fddeff09bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148498 Malicious code in telesto-pulsar-postcss-loader-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a275cd2a794542f709a54139244958b2081f35f7c8c56c88d694ce794d791e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122068
Malicious code in semantic-ui-pulsar-reveal-md-leda npm...
EUVD-2025-121430
Malicious code in telesto-pulsar-postcss-loader-indus npm...
MAL-2025-146834 Malicious code in pulsar-iota-fork-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e6dbb25e8df909f2e8745754a5e1c6dd9726eac927c26461505360a78dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112905
Malicious code in heka-lint-pulsar-install npm...
This Week in Spring - November 4th, 2025
Hi, Spring fans! Welcome to another all-out installment of This Week in Spring wherein we attempt to recap all that's new and novel in the wild, wacky, and wonderful world of Springdom. And this week, I'm doing so from an airport in Switzerland, en route to Malmo, Sweden, for the amazing Oredev...
CVE-2025-11965 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, keycloak...
GHSA-45P5-V273-3QQR vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, keycloak...